[request-tracker-maintainers] request-tracker4_4.2.13-4~bpo8+2_merged.changes ACCEPTED into jessie-backports->backports-policy

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 15 Jun 2017 21:23:41 +0100
Source: request-tracker4
Binary: request-tracker4 rt4-clients rt4-standalone rt4-fcgi rt4-apache2 rt4-db-postgresql rt4-db-mysql rt4-db-sqlite rt4-doc-html
Architecture: all source
Version: 4.2.13-4~bpo8+2
Distribution: jessie-backports
Urgency: high
Maintainer: Debian Request Tracker Group <pkg-request-tracker-maintainers at lists.alioth.debian.org>
Changed-By: Dominic Hargreaves <dom at earth.li>
Description: 
 request-tracker4 - extensible trouble-ticket tracking system
 rt4-apache2 - Apache 2 specific files for request-tracker4
 rt4-clients - mail gateway and command-line interface to request-tracker4
 rt4-db-mysql - MySQL database backend for request-tracker4
 rt4-db-postgresql - PostgreSQL database backend for request-tracker4
 rt4-db-sqlite - SQLite database backend for request-tracker4
 rt4-doc-html - HTML documentation for request-tracker4
 rt4-fcgi   - External FastCGI support for request-tracker4
 rt4-standalone - Standalone web server support for request-tracker4
Changes:
 request-tracker4 (4.2.13-4~bpo8+2) jessie-backports; urgency=high
 .
   * Fix multiple security issues:
     - [CVE-2017-5943] CSRF verification token information leak
     - [CVE-2016-6127] XSS in file uploads
     - [CVE-2017-5361] Timing side-channel vulnerability in password
       verification
     - [CVE-2017-5944] Remote code execution in dashboard interface
     - Add check for incorrect RestrictLoginReferrer configuration setting
   * Work around a DoS vulnerability in Email::Address (CVE-2015-7686)
Checksums-Sha1: 
 5946a6574f45aee52d88f652a9196fb0d09de30d 5289 request-tracker4_4.2.13-4~bpo8+2.dsc
 a9b78892df608c6df3852852f11ef2b1d73a529c 79720 request-tracker4_4.2.13-4~bpo8+2.debian.tar.xz
 1243fd449ec776f096a76fb90c4a8a833625e1be 3114784 request-tracker4_4.2.13-4~bpo8+2_all.deb
 a70f56eeffd80a1bcf11ef6dc244adf8f5990cc1 54200 rt4-clients_4.2.13-4~bpo8+2_all.deb
 8c1b94cc43af21a1b06ac5d37be9258ce06223b0 18692 rt4-standalone_4.2.13-4~bpo8+2_all.deb
 48a100234c2e1aeed81e5e7eb3dd8eabe42356e1 21730 rt4-fcgi_4.2.13-4~bpo8+2_all.deb
 8916ab63974647a53a8de4ca5ea77b17d94c1e76 19964 rt4-apache2_4.2.13-4~bpo8+2_all.deb
 82ff14e862b92f9a705c0b3091d45424aa000bf7 19302 rt4-db-postgresql_4.2.13-4~bpo8+2_all.deb
 aa337b0568d35f64f5f9962f461b2a539451485a 19302 rt4-db-mysql_4.2.13-4~bpo8+2_all.deb
 1272c8d50fccfcbc9d7c4a2e31fbd08c4ed20047 19414 rt4-db-sqlite_4.2.13-4~bpo8+2_all.deb
 84f7930ff39dea2f6729c4992895d482d0fc2d74 990002 rt4-doc-html_4.2.13-4~bpo8+2_all.deb
Checksums-Sha256: 
 d6ba8d68af0095c85290c3eb05c847c48f2428ba89f5e572f2b70fa05a176b56 5289 request-tracker4_4.2.13-4~bpo8+2.dsc
 1ad56a5b086f138e5940254077ae1082116a85c014ed6f0449b687f7aa3d97f8 79720 request-tracker4_4.2.13-4~bpo8+2.debian.tar.xz
 8b23666e6d8d2e91cfd59e67f73dc1a9d1b7b41eb35816b3f30e838d87b7d3c1 3114784 request-tracker4_4.2.13-4~bpo8+2_all.deb
 5c23fc41d34cb4ee593577e5319bfcf78783a0ee07430c06fd7e4e7825d1d723 54200 rt4-clients_4.2.13-4~bpo8+2_all.deb
 79a5fdb69a2b68fb2fe47fa776fee68533b8c278520fbdc41974d1e3fd7fc33a 18692 rt4-standalone_4.2.13-4~bpo8+2_all.deb
 e45adcaf370265f4427d261b893616a0c88da8eb9b3f8e4ab30f8425020b683e 21730 rt4-fcgi_4.2.13-4~bpo8+2_all.deb
 a3336d3279ce97d32ad18c35cb3d9774cb4a2327fc2993e44c1a391700b1a138 19964 rt4-apache2_4.2.13-4~bpo8+2_all.deb
 7723c7b77dc01812092537699fed4e7ce63546033cc96ff273cf49dd228bc1c2 19302 rt4-db-postgresql_4.2.13-4~bpo8+2_all.deb
 1bd3c6229e94849ba58d3218204b5001eb0d655cef3a432305868a44c178aee7 19302 rt4-db-mysql_4.2.13-4~bpo8+2_all.deb
 0600f1bde04103a8909d46b26453bb7836f34bef803bfbe2cfa82e1b2568a648 19414 rt4-db-sqlite_4.2.13-4~bpo8+2_all.deb
 57c5001285ecc0384cfb26e7b50a68fc274d61f26d8d848c02b6a33fad3bc767 990002 rt4-doc-html_4.2.13-4~bpo8+2_all.deb
Files: 
 ed772bd92d2e49cc1a353aa2d1df3aa5 5289 misc optional request-tracker4_4.2.13-4~bpo8+2.dsc
 1d4e696a0ddffdd6607b87c55091aaff 79720 misc optional request-tracker4_4.2.13-4~bpo8+2.debian.tar.xz
 6c41bbbc6c6105bf8fac5e2bd0284fc6 3114784 misc optional request-tracker4_4.2.13-4~bpo8+2_all.deb
 9f52a662a8b51747aa0576d44db35e4c 54200 misc optional rt4-clients_4.2.13-4~bpo8+2_all.deb
 40264d14dd58c98a7e16712b2c0fa853 18692 misc optional rt4-standalone_4.2.13-4~bpo8+2_all.deb
 c70802ff6ce6496ce50db943de4fab07 21730 misc optional rt4-fcgi_4.2.13-4~bpo8+2_all.deb
 52004f5501e4a66ec33da69f7de46d18 19964 misc optional rt4-apache2_4.2.13-4~bpo8+2_all.deb
 364336a66f5314c9486ed359e5d0fefa 19302 misc optional rt4-db-postgresql_4.2.13-4~bpo8+2_all.deb
 7cd6299819236cb0a37564fb6d546d26 19302 misc optional rt4-db-mysql_4.2.13-4~bpo8+2_all.deb
 63ee11d2dd97617c0372dfa8632839df 19414 misc optional rt4-db-sqlite_4.2.13-4~bpo8+2_all.deb
 32ec14ae39f5750b1dd2ca92681555b8 990002 doc optional rt4-doc-html_4.2.13-4~bpo8+2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Z9P+
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.